{"id":1829,"date":"2022-10-14T18:53:24","date_gmt":"2022-10-14T18:53:24","guid":{"rendered":"https:\/\/sunucucozumleri.com\/?p=1829"},"modified":"2022-10-14T18:53:24","modified_gmt":"2022-10-14T18:53:24","slug":"windowsta-uzak-masaustu-baglanti-gunluklerini-izleme-ve-analiz-etme","status":"publish","type":"post","link":"https:\/\/sunucucozumleri.com\/blog\/windowsta-uzak-masaustu-baglanti-gunluklerini-izleme-ve-analiz-etme\/","title":{"rendered":"Windows&#8217;ta Uzak Masa\u00fcst\u00fc Ba\u011flant\u0131 G\u00fcnl\u00fcklerini \u0130zleme ve Analiz Etme"},"content":{"rendered":"<p>Bu makalede, <a href=\"https:\/\/sunucucozumleri.com\/sunucu\/sanal-sunucu\/\"><strong>sanal sunucu<\/strong><\/a> <a href=\"https:\/\/sunucucozumleri.com\/blog\/sunucu\/bulut-sunucu\/\">bulut sunucu<\/a> veya fiziksel sunucuda i\u015fletim sistemi olarak windows server ailesi kullananlar i\u00e7in, Windows&#8217;ta RDP ba\u011flant\u0131 g\u00fcnl\u00fcklerinin nas\u0131l al\u0131naca\u011f\u0131n\u0131 ve denetlenece\u011fini a\u00e7\u0131klayaca\u011f\u0131z. RDP ba\u011flant\u0131 g\u00fcnl\u00fckleri, RDS terminal sunucular\u0131 y\u00f6neticilerinin, belirli bir RDP kullan\u0131c\u0131s\u0131 oturum a\u00e7\u0131p oturumu sonland\u0131rd\u0131\u011f\u0131nda sunucuda hangi kullan\u0131c\u0131lar\u0131n oturum a\u00e7t\u0131\u011f\u0131 ve kullan\u0131c\u0131n\u0131n hangi cihazdan (DNS ad\u0131 veya IP adresi) oturum a\u00e7t\u0131\u011f\u0131 hakk\u0131nda bilgi almas\u0131na olanak tan\u0131r.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Makale \u0130\u00e7eri\u011fi<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/sunucucozumleri.com\/blog\/windowsta-uzak-masaustu-baglanti-gunluklerini-izleme-ve-analiz-etme\/#Windows_Olay_Goruntuleyicisinde_RDP_Baglanti_Olaylari\" >Windows Olay G\u00f6r\u00fcnt\u00fcleyicisinde RDP Ba\u011flant\u0131 Olaylar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/sunucucozumleri.com\/blog\/windowsta-uzak-masaustu-baglanti-gunluklerini-izleme-ve-analiz-etme\/#PowerShell_ile_Uzak_Masaustu_Oturum_Acma_Gecmisini_Alma\" >PowerShell ile Uzak Masa\u00fcst\u00fc Oturum A\u00e7ma Ge\u00e7mi\u015fini Alma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/sunucucozumleri.com\/blog\/windowsta-uzak-masaustu-baglanti-gunluklerini-izleme-ve-analiz-etme\/#Windowsta_Giden_RDP_Baglanti_Gunlukleri\" >Windows&#8217;ta Giden RDP Ba\u011flant\u0131 G\u00fcnl\u00fckleri<\/a><\/li><\/ul><\/nav><\/div>\n<h2 id=\"h2_1\"><span class=\"ez-toc-section\" id=\"Windows_Olay_Goruntuleyicisinde_RDP_Baglanti_Olaylari\"><\/span>Windows Olay G\u00f6r\u00fcnt\u00fcleyicisinde RDP Ba\u011flant\u0131 Olaylar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bir kullan\u0131c\u0131 Uzak Masa\u00fcst\u00fc etkinle\u015ftirilmi\u015f veya RDS ana bilgisayar\u0131na ba\u011fland\u0131\u011f\u0131nda, bu olaylarla ilgili bilgiler Olay G\u00f6r\u00fcnt\u00fcleyici g\u00fcnl\u00fcklerinde (\u00a0<code>eventvwr.msc<\/code>) depolan\u0131r.\u00a0Olay G\u00f6r\u00fcnt\u00fcleyici&#8217;de y\u00f6neticinin ilgisini \u00e7ekebilecek RDP ba\u011flant\u0131s\u0131n\u0131n ana a\u015famalar\u0131n\u0131 ve ilgili olaylar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurun<\/p>\n<ol>\n<li>A\u011f ba\u011flant\u0131s\u0131;<\/li>\n<li>kimlik do\u011frulama;<\/li>\n<li>oturum a\u00e7ma;<\/li>\n<li>Oturum Ba\u011flant\u0131s\u0131n\u0131 Kes\/Yeniden Ba\u011flan;<\/li>\n<li>oturumu Kapat<\/li>\n<\/ol>\n<p><strong>A\u011f Ba\u011flant\u0131s\u0131<\/strong>\u00a0\u2013 kullan\u0131c\u0131n\u0131n RDP istemcisinden bir sunucuya a\u011f ba\u011flant\u0131s\u0131 kurulmas\u0131.\u00a0EventID<strong>\u00a01149<\/strong>\u00a0(<code>Remote Desktop Services: User authentication succeeded<\/code>) ile olayd\u0131r.\u00a0Bu olay bulunursa, kullan\u0131c\u0131 kimlik do\u011frulamas\u0131n\u0131n ba\u015far\u0131l\u0131 oldu\u011fu anlam\u0131na gelmez.\u00a0Bu g\u00fcnl\u00fck, &#8220;Uygulamalar ve Hizmet G\u00fcnl\u00fckleri -&gt; Microsoft -&gt; Windows -&gt;<strong>\u00a0Terminal-Services-RemoteConnectionManager<\/strong>\u00a0&gt; Operasyonel&#8221; alt\u0131nda bulunur.\u00a0Bu olay i\u00e7in g\u00fcnl\u00fck filtresini etkinle\u015ftirin (g\u00fcnl\u00fc\u011fe sa\u011f t\u0131klay\u0131n -&gt; Ge\u00e7erli G\u00fcnl\u00fc\u011f\u00fc Filtrele -&gt; EventId<em>\u00a01149<\/em>\u00a0).<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1830\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme.png\" alt=\"\" width=\"777\" height=\"499\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme.png 777w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme-300x193.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme-768x493.png 768w\" sizes=\"(max-width: 777px) 100vw, 777px\" \/><\/p>\n<p>PowerShell ile t\u00fcm RDP ba\u011flant\u0131 denemelerini listeleyebilirsiniz:<br \/>\n<code><br \/>\n$RDPAuths = Get-WinEvent -LogName 'Microsoft-Windows-TerminalServices-RemoteConnectionManager\/Operational' -FilterXPath '<select>*[System[EventID=1149]]<\/select>'<br \/>\n[xml[]]$xml=$RDPAuths|Foreach{$_.ToXml()}<br \/>\n$EventData = Foreach ($event in $xml.Event)<br \/>\n{ New-Object PSObject -Property @{<br \/>\nTimeCreated = (Get-Date ($event.System.TimeCreated.SystemTime) -Format 'yyyy-MM-dd hh:mm:ss K')<br \/>\nUser = $event.UserData.EventXML.Param1<br \/>\n<a href=\"https:\/\/sunucucozumleri.com\/blog\/domain-nedir\/\">Domain<\/a> = $event.UserData.EventXML.Param2<br \/>\nClient = $event.UserData.EventXML.Param3<br \/>\n}<br \/>\n} $EventData | FT<br \/>\n<\/code><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1831\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme2.jpg\" alt=\"\" width=\"489\" height=\"146\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme2.jpg 489w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme2-300x90.jpg 300w\" sizes=\"(max-width: 489px) 100vw, 489px\" \/><\/p>\n<p>Ard\u0131ndan, bu sunucuya yap\u0131lan t\u00fcm RDP ba\u011flant\u0131lar\u0131n\u0131n ge\u00e7mi\u015fini i\u00e7eren bir olay listesi alacaks\u0131n\u0131z.\u00a0G\u00fcnl\u00fckler bir kullan\u0131c\u0131 ad\u0131, bir etki alan\u0131 (bu durumda A\u011f D\u00fczeyinde Kimlik Do\u011frulama kullan\u0131l\u0131r;\u00a0NLA devre d\u0131\u015f\u0131ysa\u00a0olay a\u00e7\u0131klamas\u0131 farkl\u0131 g\u00f6r\u00fcn\u00fcr) ve kullan\u0131c\u0131n\u0131n bilgisayar\u0131n\u0131n IP adresini sa\u011flar.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1832\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme3.png\" alt=\"\" width=\"800\" height=\"600\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme3.png 800w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme3-300x225.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme3-768x576.png 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p><strong>Kimlik do\u011frulama<\/strong>\u00a0, bir RDP kullan\u0131c\u0131s\u0131n\u0131n sunucuda ba\u015far\u0131yla do\u011frulan\u0131p do\u011frulanmad\u0131\u011f\u0131n\u0131 g\u00f6sterir.\u00a0G\u00fcnl\u00fck, Windows -&gt; G\u00fcvenlik alt\u0131nda bulunur.\u00a0<strong>Bu nedenle EventID 4624<\/strong>\u00a0(<code>An account was successfully logged on<\/code>) veya<strong>\u00a04625<\/strong>\u00a0(olan olaylar ilginizi \u00e7ekebilir<code>An account failed to log on<\/code>.<\/p>\n<p>L\u00fctfen olay a\u00e7\u0131klamas\u0131nda\u00a0<strong>LogonType<\/strong>\u00a0de\u011ferine dikkat edin .<\/p>\n<ul>\n<li><strong>LogonType = 10<\/strong>\u00a0veya\u00a0<strong>3<\/strong>\u00a0\u2014 oturum a\u00e7ma s\u0131ras\u0131nda yeni bir oturum olu\u015fturmak i\u00e7in Uzak Masa\u00fcst\u00fc hizmeti kullan\u0131lm\u0131\u015fsa;<\/li>\n<li><strong>LogonType = 7<\/strong>\u00a0, bir kullan\u0131c\u0131n\u0131n mevcut RDP oturumuna yeniden ba\u011fland\u0131\u011f\u0131 anlam\u0131na gelir;<\/li>\n<li><strong>LogonType = 5<\/strong>\u00a0\u2013 <a href=\"https:\/\/sunucucozumleri.com\/blog\/frontpage\/\">Sunucu<\/a> konsoluna RDP ba\u011flant\u0131s\u0131 (mstsc.exe \/admin modunda).<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1833\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme4.png\" alt=\"\" width=\"834\" height=\"655\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme4.png 834w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme4-300x236.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme4-768x603.png 768w\" sizes=\"(max-width: 834px) 100vw, 834px\" \/><\/p>\n<p>Bu durumda, kullan\u0131c\u0131 ad\u0131\u00a0<strong>Hesap Ad\u0131<\/strong>\u00a0alan\u0131nda olay a\u00e7\u0131klamas\u0131nda, <a href=\"https:\/\/sunucucozumleri.com\/blog\/bilgisayar-nasil-kullanilir\/\">bilgisayar<\/a> ad\u0131\u00a0<strong>\u0130\u015f \u0130stasyonu Ad\u0131nda<\/strong>\u00a0ve kullan\u0131c\u0131 IP&#8217;si\u00a0<strong>Kaynak A\u011f Adresinde<\/strong>\u00a0bulunur .<\/p>\n<div class=\"info_box\"><strong>L\u00fctfen LogonID<\/strong>\u00a0alan\u0131n\u0131n\u00a0de\u011ferini not edin .\u00a0Bu, kullan\u0131c\u0131n\u0131n di\u011fer etkinli\u011fini izlemeye yard\u0131mc\u0131 olan benzersiz bir kullan\u0131c\u0131 RDP oturum tan\u0131mlay\u0131c\u0131s\u0131d\u0131r.\u00a0Ancak, bir RDP oturumunun ba\u011flant\u0131s\u0131 kesilir ve bir kullan\u0131c\u0131 buna yeniden ba\u011flan\u0131rsa, kullan\u0131c\u0131ya yeni bir LogonID atan\u0131r (RDP oturumu ayn\u0131 kalsa da).<\/div>\n<div>\n<p>Bu PowerShell komutunu kullanarak ba\u015far\u0131l\u0131 RDP kimlik do\u011frulama olaylar\u0131n\u0131n (EventID 4624) bir listesini alabilirsiniz:<\/p>\n<p><code><br \/>\nGet-EventLog security -after (Get-date -hour 0 -minute 0 -second 0) | ?{$_.eventid -eq 4624 -and $_.Message -match 'logon type:\\s+(10)\\s'} | Out-GridView<br \/>\n<\/code><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1834\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme5.png\" alt=\"\" width=\"813\" height=\"488\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme5.png 813w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme5-300x180.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme5-768x461.png 768w\" sizes=\"(max-width: 813px) 100vw, 813px\" \/><\/p>\n<p>Oturum a\u00e7ma, Windows&#8217;ta RDP oturuma\u00e7ma anlam\u0131na gelir<strong>.\u00a0<\/strong>EventID<strong>\u00a021<\/strong>\u00a0\u2013 bu olay, bir kullan\u0131c\u0131n\u0131n kimli\u011fi ba\u015far\u0131yla do\u011fruland\u0131ktan sonra g\u00f6r\u00fcn\u00fcr (<code>Remote Desktop Services: Session logon succeeded<\/code>).\u00a0Bu olaylar \u201cApplications and Services Logs -&gt; Microsoft -&gt; Windows -&gt;<strong>\u00a0TerminalServices-LocalSessionManager<\/strong>\u00a0-&gt; Operational\u201d b\u00f6l\u00fcm\u00fcnde yer almaktad\u0131r.\u00a0G\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi, burada bir kullan\u0131c\u0131 RDP oturumunun kimli\u011fini bulabilirsiniz \u2014<strong>\u00a0Oturum Kimli\u011fi<\/strong>\u00a0.<\/p>\n<\/div>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1835\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme6.png\" alt=\"\" width=\"790\" height=\"487\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme6.png 790w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme6-300x185.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme6-768x473.png 768w\" sizes=\"(max-width: 790px) 100vw, 790px\" \/><\/p>\n<p>EventID \u2013\u00a0<strong>21<\/strong>\u00a0\u00a0(\u00a0<code>Remote Desktop Services: Shell start notification received<\/code>), Explorer kabu\u011funun ba\u015far\u0131yla ba\u015flat\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6sterir (Windows masa\u00fcst\u00fc, kullan\u0131c\u0131n\u0131n RDP oturumunda g\u00f6r\u00fcn\u00fcr).<\/p>\n<div>\n<p><strong>Oturum Ba\u011flant\u0131s\u0131n\u0131 Kes\/Yeniden Ba\u011flan<\/strong>\u00a0\u2013 oturum ba\u011flant\u0131s\u0131n\u0131n kesilmesi ve yeniden ba\u011flanma olaylar\u0131n\u0131n, kullan\u0131c\u0131n\u0131n ba\u011flant\u0131s\u0131n\u0131n kesilmesine neden olan \u015feye ba\u011fl\u0131 olarak farkl\u0131 kimlikleri vard\u0131r (\u00a0RDP oturumlar\u0131 i\u00e7in zaman a\u015f\u0131mlar\u0131nda\u00a0ayarlanan hareketsizlik nedeniyle ba\u011flant\u0131n\u0131n kesilmesi , Oturumda kullan\u0131c\u0131 taraf\u0131ndan Ba\u011flant\u0131y\u0131 Kes se\u00e7ene\u011fi se\u00e7ilmi\u015f, RDP oturumu ba\u015fka bir kullan\u0131c\u0131 taraf\u0131ndan sonland\u0131r\u0131lm\u0131\u015ft\u0131r) veya bir y\u00f6netici vb.).\u00a0Bu olaylar\u0131 Olay G\u00f6r\u00fcnt\u00fcleyicide \u201cUygulamalar ve Hizmet G\u00fcnl\u00fckleri -&gt; Microsoft -&gt; Windows -&gt; TerminalServices-LocalSessionManager -&gt; Operasyonel\u201d alt\u0131nda bulabilirsiniz.\u00a0Yararl\u0131 olabilecek RDP Olay Kimliklerini ele alal\u0131m:<\/p>\n<ul>\n<li>EventID \u2013\u00a0<strong>24<\/strong>\u00a0(\u00a0<code>Remote Desktop Services: Session has been disconnected<\/code>) \u2013bir kullan\u0131c\u0131n\u0131n RDP oturumuyla ba\u011flant\u0131s\u0131 kesildi;<\/li>\n<li>EventID \u2013\u00a0<strong>25<\/strong>\u00a0(\u00a0<code>Remote Desktop Services: Session reconnection succeeded<\/code>) \u2013 bir kullan\u0131c\u0131 sunucudaki mevcut RDP oturumuna yeniden ba\u011fland\u0131;<\/li>\n<li>EventID \u2013\u00a0<strong>39<\/strong>\u00a0(\u00a0<code>Session &lt;A&gt; has been disconnected by session &lt;B&gt;<\/code>) \u2013 bir kullan\u0131c\u0131 ilgili men\u00fc se\u00e7ene\u011fini se\u00e7erek (sadece RDP istemci penceresini kapatmak yerine) RDP oturumuyla ba\u011flant\u0131s\u0131n\u0131 kesti.\u00a0Oturum kimlikleri farkl\u0131ysa, bir kullan\u0131c\u0131n\u0131n ba\u011flant\u0131s\u0131 ba\u015fka bir kullan\u0131c\u0131 (veya y\u00f6netici) taraf\u0131ndan kesilmi\u015ftir;<\/li>\n<li>Olay Kimli\u011fi \u2013\u00a0<strong>40<\/strong>\u00a0(\u00a0<code>Session &lt;A&gt; has been disconnected, reason code &lt;B&gt;<\/code>).\u00a0Burada olay a\u00e7\u0131klamas\u0131ndaki ba\u011flant\u0131 kesme neden kodunu kontrol etmelisiniz.\u00a0\u00d6rne\u011fin:\n<ul>\n<li><strong>neden kodu 0<\/strong>\u00a0(\u00a0<code>No additional information is available<\/code>), bir kullan\u0131c\u0131n\u0131n RDP istemci penceresini hen\u00fcz kapatt\u0131\u011f\u0131 anlam\u0131na gelir;<\/li>\n<li><strong>neden kodu 5<\/strong>\u00a0(\u00a0<code>The client\u2019s connection was replaced by another connection<\/code>), bir kullan\u0131c\u0131n\u0131n \u00f6nceki RDP oturumuna yeniden ba\u011fland\u0131\u011f\u0131 anlam\u0131na gelir;<\/li>\n<li><strong>neden kodu 11<\/strong>\u00a0(\u00a0<code>User activity has initiated the disconnect<\/code>) bir kullan\u0131c\u0131 ba\u015flat men\u00fcs\u00fcndeki Ba\u011flant\u0131y\u0131 Kes d\u00fc\u011fmesini t\u0131klad\u0131.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Windows&#8217;ta EventID\u00a0<strong>4778<\/strong>\u00a0-&gt; G\u00fcvenlik g\u00fcnl\u00fc\u011f\u00fc (Bir oturum bir Window Station&#8217;a yeniden ba\u011fland\u0131).\u00a0Bir kullan\u0131c\u0131 bir RDP oturumuna yeniden ba\u011fland\u0131 (bir kullan\u0131c\u0131ya yeni bir LogonID atan\u0131r).<\/p>\n<p>\u201cWindows -&gt; G\u00fcvenlik\u201d g\u00fcnl\u00fc\u011f\u00fcnde (\u00a0)\u00a0EventID\u00a0<strong>4779 .\u00a0<\/strong><code>A session was disconnected from a Window Station<\/code>Bir kullan\u0131c\u0131n\u0131n RDP oturumuyla ba\u011flant\u0131s\u0131 kesildi.<\/p>\n<p><strong>Oturum kapatma<\/strong>\u00a0, bir kullan\u0131c\u0131 oturumunun sonunu ifade eder.\u00a0\u201cApplications and Services Logs -&gt; Microsoft -&gt; Windows -&gt; TerminalServices-LocalSessionManager -&gt; Operational\u201d alt\u0131nda EventID<strong>\u00a023<\/strong>\u00a0(ile olay olarak<code>Remote Desktop Services: Session logoff succeeded<\/code><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1836\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme7.png\" alt=\"\" width=\"774\" height=\"383\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme7.png 774w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme7-300x148.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme7-768x380.png 768w\" sizes=\"(max-width: 774px) 100vw, 774px\" \/><\/p>\n<p>Ayn\u0131 zamanda\u00a0G\u00fcvenlik g\u00fcnl\u00fc\u011f\u00fcnde EventID\u00a0<strong>4634<\/strong>\u00a0\u00a0( ) g\u00f6r\u00fcn\u00fcr.<code>An account was logged off<\/code><\/p>\n<p>Sistem g\u00fcnl\u00fc\u011f\u00fcndeki EventID\u00a0<strong>9009<\/strong>\u00a0\u00a0(\u00a0<code>The Desktop Window Manager has exited with code &lt;X&gt;<\/code>), bir kullan\u0131c\u0131n\u0131n hem pencere hem de kullan\u0131c\u0131n\u0131n grafik kabu\u011fu sonland\u0131r\u0131ld\u0131\u011f\u0131nda RDP oturumundan oturumu kapatmay\u0131 ba\u015flatt\u0131\u011f\u0131 anlam\u0131na gelir.<\/p>\n<p>EventID\u00a0<strong>4647<\/strong>\u00a0\u2014 Kullan\u0131c\u0131 taraf\u0131ndan ba\u015flat\u0131lan oturum kapatma<\/p>\n<h2 id=\"h2_2\"><span class=\"ez-toc-section\" id=\"PowerShell_ile_Uzak_Masaustu_Oturum_Acma_Gecmisini_Alma\"><\/span>PowerShell ile Uzak Masa\u00fcst\u00fc Oturum A\u00e7ma Ge\u00e7mi\u015fini Alma<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0130\u015fte, terminal RDS sunucusu olay g\u00fcnl\u00fcklerinden o g\u00fcn i\u00e7in t\u00fcm RDP ba\u011flant\u0131lar\u0131n\u0131n ge\u00e7mi\u015fini listeleyen k\u0131sa bir PowerShell beti\u011fi.\u00a0Ortaya \u00e7\u0131kan tablo ba\u011flant\u0131 s\u00fcresini, istemcinin IP adresini (DNS bilgisayar ad\u0131) ve uzak kullan\u0131c\u0131 ad\u0131n\u0131 (gerekirse rapora di\u011fer LogonType&#8217;lar\u0131 dahil edebilirsiniz) g\u00f6sterir.<\/p>\n<p><code><br \/>\nGet-EventLog -LogName Security -after (Get-date -hour 0 -minute 0 -second 0)| ?{(4624,4778) -contains $_.EventID -and $_.Message -match 'logon type:\\s+(10)\\s'}| %{<br \/>\n(new-object -Type PSObject -Property @{<br \/>\nTimeGenerated = $_.TimeGenerated<br \/>\nClientIP = $_.Message -replace '(?smi).*Source Network Address:\\s+([^\\s]+)\\s+.*','$1'<br \/>\nUserName = $_.Message -replace '(?smi).*\\s\\sAccount Name:\\s+([^\\s]+)\\s+.*','$1'<br \/>\nUserDomain = $_.Message -replace '(?smi).*\\s\\sAccount Domain:\\s+([^\\s]+)\\s+.*','$1'<br \/>\nLogonType = $_.Message -replace '(?smi).*Logon Type:\\s+([^\\s]+)\\s+.*','$1'<br \/>\n})<br \/>\n} | sort TimeGenerated -Descending | Select TimeGenerated, ClientIP `<br \/>\n, @{N='Username';E={'{0}\\{1}' -f $_.UserDomain,$_.UserName}} `<br \/>\n, @{N='LogType';E={<br \/>\n<a href=\"https:\/\/sunucucozumleri.com\/blog\/switch-nedir-switch-ne-ise-yarar\/\">switch<\/a> ($_.LogonType) {<br \/>\n2 {'Interactive - local logon'}<br \/>\n3 {'Network connection to shared folder)'}<br \/>\n4 {'Batch'}<br \/>\n5 {'Service'}<br \/>\n7 {'Unlock (after screensaver)'}<br \/>\n8 {'NetworkCleartext'}<br \/>\n9 {'NewCredentials (local impersonation process under existing connection)'}<br \/>\n10 {'RDP'}<br \/>\n11 {'CachedInteractive'}<br \/>\ndefault {\"LogType Not Recognised: $($_.LogonType)\"}<br \/>\n}<br \/>\n}}<br \/>\n<\/code><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1837\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme8.png\" alt=\"\" width=\"714\" height=\"670\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme8.png 714w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme8-300x282.png 300w\" sizes=\"(max-width: 714px) 100vw, 714px\" \/><\/p>\n<p>Bu y\u00f6ntem, ba\u011f\u0131ms\u0131z bir RDSH sunucusunda\u00a0RDP ba\u011flant\u0131 g\u00fcnl\u00fcklerini toplaman\u0131za ve ayr\u0131\u015ft\u0131rman\u0131za olanak tan\u0131r\u00a0.\u00a0RDS grubunda birden \u00e7ok sunucunuz varsa, her birini bu komut dosyas\u0131yla sorgulayabilir veya\u00a0Uzak Masa\u00fcst\u00fc Ba\u011flant\u0131 Arac\u0131s\u0131 rol\u00fcne\u00a0sahip bir y\u00f6netim sunucusundan g\u00fcnl\u00fckler alabilirsiniz .<\/p>\n<p>RDP ba\u011flant\u0131 g\u00fcnl\u00fcklerini Olay G\u00f6r\u00fcnt\u00fcleyici&#8217;den bir CSV dosyas\u0131na aktarabilirsiniz (bir <a href=\"https:\/\/sunucucozumleri.com\/blog\/excel-kullanim-rehberi-excel-puf-noktalar\/\">Excel<\/a> elektronik tablosunda daha fazla analiz i\u00e7in).\u00a0G\u00fcnl\u00fc\u011f\u00fc Olay G\u00f6r\u00fcnt\u00fcleyici GUI&#8217;sinden (Olay G\u00f6r\u00fcnt\u00fcleyici g\u00fcnl\u00fcklerinin temizlenmedi\u011fini varsayarak) veya komut istemi arac\u0131l\u0131\u011f\u0131yla d\u0131\u015fa aktarabilirsiniz:<\/p>\n<p><code><br \/>\nWEVTUtil query-events Security &gt; c:\\ps\\rdp_security_log.txt<br \/>\n<\/code><\/p>\n<p>Veya PowerShell ile:<br \/>\n<code><br \/>\nget-winevent -logname \"Microsoft-Windows-TerminalServices-LocalSessionManager\/Operational\" | Export-Csv c:\\ps\\rdp_connection_log.txt  -Encoding UTF8<br \/>\n<\/code><\/p>\n<p>Kullan\u0131c\u0131lar\u0131n\u0131z Uzak Masa\u00fcst\u00fc A\u011f Ge\u00e7idi \u00fczerinden kurumsal RDS ana bilgisayarlar\u0131na ba\u011flan\u0131rsa\u00a0, EventID\u00a0<strong>302 ile\u00a0<\/strong><strong>Microsoft-Windows-TerminalServices-Gateway<\/strong>\u00a0g\u00fcnl\u00fc\u011f\u00fcndeki kullan\u0131c\u0131 ba\u011flant\u0131 g\u00fcnl\u00fcklerini kontrol edebilirsiniz .\u00a0\u00d6rne\u011fin, a\u015fa\u011f\u0131daki PowerShell beti\u011fi, belirtilen kullan\u0131c\u0131n\u0131n RD A\u011f Ge\u00e7idi arac\u0131l\u0131\u011f\u0131yla ba\u011flant\u0131 ge\u00e7mi\u015fini g\u00f6r\u00fcnt\u00fcler:<br \/>\n<code><br \/>\n$rdpusername=\"b.smith\"<br \/>\n$properties = @(<br \/>\n@{n='User';e={$_.Properties[0].Value}},<br \/>\n@{n='Source IP Adress';e={$_.Properties[1].Value}},<br \/>\n@{n='TimeStamp';e={$_.TimeCreated}}<br \/>\n@{n='Target RDP host';e={$_.Properties[3].Value}}<br \/>\n)<br \/>\n(Get-WinEvent -FilterHashTable @{LogName='Microsoft-Windows-TerminalServices-Gateway\/Operational';ID='302'} | Select-Object $properties) -match $rdpusername<br \/>\n<\/code><br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-1838\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme9.jpg\" alt=\"\" width=\"550\" height=\"87\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme9.jpg 550w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme9-300x47.jpg 300w\" sizes=\"(max-width: 550px) 100vw, 550px\" \/><\/p>\n<p>Microsoft-Windows-TerminalServices-Gateway olay g\u00fcnl\u00fc\u011f\u00fcnde a\u015fa\u011f\u0131daki RD A\u011f Ge\u00e7idi kullan\u0131c\u0131 ba\u011flant\u0131s\u0131 olaylar\u0131n\u0131 kontrol edebilirsiniz:<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong>300<\/strong>\u00a0\u2014 C\u0130HAZ istemci bilgisayar\u0131ndaki NAME kullan\u0131c\u0131s\u0131, kaynak yetkilendirme ilkesi gereksinimlerini kar\u015f\u0131lad\u0131 ve bu nedenle RDPHOST kayna\u011f\u0131na ba\u011flanma yetkisine sahipti;<\/li>\n<li><strong>302<\/strong>\u00a0\u2014 DEVICE istemci bilgisayar\u0131ndaki kullan\u0131c\u0131 ADI, RDPHOST kayna\u011f\u0131na ba\u011fl\u0131;<\/li>\n<li><strong>303<\/strong>\u00a0\u2014 DEVICE istemci bilgisayar\u0131ndaki NAME kullan\u0131c\u0131s\u0131n\u0131n \u015fu a\u011f kayna\u011f\u0131yla ba\u011flant\u0131s\u0131 kesildi: RDPHOST.\u00a0Kullan\u0131c\u0131n\u0131n ba\u011flant\u0131s\u0131 kesilmeden \u00f6nce, istemci X bayt aktard\u0131 ve X bayt ald\u0131.\u00a0\u0130stemci oturumu s\u00fcresi X saniyeydi.<\/li>\n<\/ul>\n<p>\u015eu komutla RDS ana makinenizde mevcut uzak oturumlar\u0131n listesini g\u00f6r\u00fcnt\u00fcleyebilirsiniz:<\/p>\n<p>qwinsta<\/p>\n<p>Komut, oturum kimli\u011fini, KULLANICI ADI ve oturum durumunu (Etkin\/Ba\u011flant\u0131y\u0131 Kes) d\u00f6nd\u00fcr\u00fcr.\u00a0Bu komut, g\u00f6lge Uzak Masa\u00fcst\u00fc ba\u011flant\u0131lar\u0131n\u0131\u00a0kullan\u0131rken kullan\u0131c\u0131n\u0131n RDP oturum kimli\u011fini alman\u0131z gerekti\u011finde kullan\u0131\u015fl\u0131d\u0131r\u00a0.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1839\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme10.png\" alt=\"\" width=\"577\" height=\"298\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme10.png 577w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme10-300x155.png 300w\" sizes=\"(max-width: 577px) 100vw, 577px\" \/><\/p>\n<p>Belirli RDP oturumunda \u00e7al\u0131\u015fan i\u015flemlerin listesini g\u00f6r\u00fcnt\u00fcleyebilirsiniz (oturum kimli\u011fi belirtilir):<\/p>\n<p><code>qprocess \/id:5<\/code><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1840\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme11.png\" alt=\"\" width=\"485\" height=\"376\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme11.png 485w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme11-300x233.png 300w\" sizes=\"(max-width: 485px) 100vw, 485px\" \/><\/p>\n<h2 id=\"h2_3\"><span class=\"ez-toc-section\" id=\"Windowsta_Giden_RDP_Baglanti_Gunlukleri\"><\/span>Windows&#8217;ta Giden RDP Ba\u011flant\u0131 G\u00fcnl\u00fckleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ayr\u0131ca, giden RDP ba\u011flant\u0131 g\u00fcnl\u00fcklerini istemci taraf\u0131nda da g\u00f6r\u00fcnt\u00fcleyebilirsiniz.\u00a0A\u015fa\u011f\u0131daki olay g\u00fcnl\u00fc\u011f\u00fcnde bulunurlar: Uygulama ve Hizmet G\u00fcnl\u00fckleri -&gt; Microsoft -&gt; Windows -&gt; TerminalServices-ClientActiveXCore -&gt; Microsoft-Windows-TerminalServices-RDPClient -&gt; Operasyonel.<\/p>\n<p>\u00d6rne\u011fin, bir kullan\u0131c\u0131 uzak bir Windows Server RDS ana bilgisayar\u0131na veya\u00a0RDP etkinle\u015ftirilmi\u015f\u00a0bir Windows 10\/11 bilgisayar\u0131na ba\u011fland\u0131\u011f\u0131nda EventID\u00a0<strong>1102<\/strong>\u00a0olu\u015fur (masa\u00fcst\u00fc Windows s\u00fcr\u00fcmleri ayr\u0131ca\u00a0birden \u00e7ok e\u015fzamanl\u0131 RDP ba\u011flant\u0131s\u0131n\u0131\u00a0destekler ).<\/p>\n<pre>\u0130stemci, 192.168.13.201 sunucusuna \u00e7oklu aktar\u0131m ba\u011flant\u0131s\u0131 ba\u015flatt\u0131.\r\n<img decoding=\"async\" class=\"alignnone size-full wp-image-1841\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme12.jpg\" alt=\"\" width=\"500\" height=\"239\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme12.jpg 500w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme12-300x143.jpg 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/pre>\n<p>A\u015fa\u011f\u0131daki RDP komut dosyas\u0131, ge\u00e7erli bilgisayardaki RDP istemci ba\u011flant\u0131lar\u0131n\u0131n ge\u00e7mi\u015fini g\u00f6r\u00fcnt\u00fcler:<\/p>\n<p><code>$properties = @(<br \/>\n@{n='TimeStamp';e={$_.TimeCreated}}<br \/>\n@{n='LocalUser';e={$_.UserID}}<br \/>\n@{n='Target RDP host';e={$_.Properties[1].Value}}<br \/>\n)<br \/>\nGet-WinEvent -FilterHashTable @{LogName='Microsoft-Windows-TerminalServices-RDPClient\/Operational';ID='1102'} | Select-Object $properties<\/code><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1842\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme13.jpg\" alt=\"\" width=\"650\" height=\"107\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme13.jpg 650w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/Windowsta-Uzak-Masaustu-Baglanti-Gunluklerini-Izleme-ve-Analiz-Etme13-300x49.jpg 300w\" sizes=\"(max-width: 650px) 100vw, 650px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Komut dosyas\u0131, bu bilgisayarda RDP ba\u011flant\u0131lar\u0131n\u0131 ba\u015flatan kullan\u0131c\u0131lar\u0131n SID&#8217;lerini ve ayr\u0131ca kullan\u0131c\u0131lar\u0131n ba\u011fland\u0131\u011f\u0131 Uzak Masa\u00fcst\u00fc ana bilgisayarlar\u0131n\u0131n DNS adlar\u0131n\u0131\/IP adreslerini d\u00f6nd\u00fcr\u00fcr.\u00a0SID&#8217;leri a\u015fa\u011f\u0131daki gibi\u00a0kullan\u0131c\u0131 adlar\u0131na d\u00f6n\u00fc\u015ft\u00fcrebilirsiniz\u00a0.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Bu makalede, sanal sunucu bulut sunucu veya fiziksel sunucuda i\u015fletim sistemi olarak windows server ailesi kullananlar i\u00e7in, Windows&#8217;ta RDP ba\u011flant\u0131 g\u00fcnl\u00fcklerinin nas\u0131l al\u0131naca\u011f\u0131n\u0131 ve denetlenece\u011fini a\u00e7\u0131klayaca\u011f\u0131z. RDP ba\u011flant\u0131 g\u00fcnl\u00fckleri, RDS terminal sunucular\u0131 y\u00f6neticilerinin, belirli bir RDP kullan\u0131c\u0131s\u0131 oturum a\u00e7\u0131p oturumu sonland\u0131rd\u0131\u011f\u0131nda sunucuda hangi kullan\u0131c\u0131lar\u0131n oturum a\u00e7t\u0131\u011f\u0131 ve kullan\u0131c\u0131n\u0131n hangi cihazdan (DNS ad\u0131 veya IP adresi) &hellip;<\/p>\n","protected":false},"author":1,"featured_media":1833,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[6],"tags":[],"class_list":["post-1829","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows"],"acf":[],"_links":{"self":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/1829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/comments?post=1829"}],"version-history":[{"count":0,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/1829\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media\/1833"}],"wp:attachment":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media?parent=1829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/categories?post=1829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/tags?post=1829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}